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Top Stories 

• Three engines and 10 freight cars from a Union Pacific train derailed after colliding with a 
semi-truck at a crossing in Ward County, Texas, August 3 halting eastbound rail traffic 
while crews repaired about 1,000 feet of damaged track. - Odessa American (See item 7 ) 

• Fire crews continued to fight several wildfires in Oregon and California that combined, 
have burned thousands of acres, while three new fires have burned over 2,000 acres and 
compromised the Idaho Power transmission line in Wallowa County. - Portland 
Oregonian (See item 1^) 

• Rapid 7 reported that multi-function printers from several companies contain 
vulnerabilities that can allow an attacker to access usernames, email addresses, and 
passwords from corporate Active Directory accounts. - The Register (See item 

• A faulty air conditioner is believed to be the cause of a fire that broke out August 4 at the 
Fair Haven strip mall in Jesup, Georgia, destroying 7 businesses as well as an office space 
and a church. - WSAV 3 Savannah (See item 27 ) 
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Energy Sector 



1. August 4, WLOX 13 Biloxi - (Mississippi) Mississippi Power going coal-free at Plant 
Watson. The remaining two coal-fired units at Mississippi Power’s Plant Watson in 
Gulfport will be converted to natural gas by April 2015 as part of a settlement between 
the company and the Sierra Club which will ensure the company is in compliance with 
new federal environmental standards. The settlement also includes establishing and 
funding a $15 million grant for an energy efficiency and renewable energy program 
associated with the Kemper County energy facility. 

Source: http://www.wlox.com/storv/26190738/mississippi-power-going-coal-free-at- 
plant-watson 

For another story, see item 15 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. August 4, U.S. Department of Labor - (Texas) Houston machine shop cited hy US 
Department of Labor’s OSHA for 13 safety violations for exposing workers to 
amputation hazards. The Occupational Safety and Health Administration cited 
Dimensional Machine Works LLC for 13 safety violations, 7 of which were repeat 
violations, for continuing to expose its workers to amputation hazards at the company’s 
Houston facility. Proposed fines totaled $57,750. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26478 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



3. August 4, U.S. Securities and Exchange Commission - (California) SEC charges 
California-based broker with stealing money from accounts. The U.S. Securities 
and Exchange Commission charged the former sole owner of Thornes & Associates, 
Inc., in Redlands with stealing $4.4 million from a two brokerage accounts under his 
control and paying out the funds to two friends and for personal use. The former owner 
agreed to settle the charges by paying roughly $4.4 million in disgorgement, plus 
interest, and nearly $4.4 million in penalties. 

Source: http ://www .sec . gov/litigation/litreleases/20 1 4/lr2305 8 .htm 

[ Return to top] 

Transportation Systems Sector 

4. August 5, Redding Record Searchlight - (California) One lane of Hwy. 97 open again 
after fire closure. One lane of Highway 97 in Siskiyou County between Weed and Mt. 
Hebron reopened August 5 after the highway was shut down twice due to the 4,000- 
acre Little Deer Fire that was 21 percent contained. 

Source: http://www.redding.com/news/breaking-news/little-deer-fire-forces-closure-of- 
hwv-97 

5. August 5, WPXI 11 Pittsburgh; Associated Press; Pittsburgh Tribune-Review - 
(Pennsylvania) Smoke forces evacuation of flight at Pittsburgh International. 
Authorities are investigating after passengers on a United Airlines Express flight were 
forced to evacuate the plane on the runway at Pittsburgh International Airport after 
safely landing August 4 due to reports of smoke on the plane. The runway was closed 
while the plane was towed to the gate. 

Source: http://www.wpxi.com/news/news/local/smoke-forces-evacuation-flight- 
pittsburgh-internat/ngt3r/ 

6. August 4, Milwaukee Journal Sentinel - (Wisconsin) Fire damages Rock County bar, 
forces highway closure. An August 4 fire that broke out at the Anchor Inn Bar in 
Edgerton August 4 prompted authorities to close westbound lanes of Highway 59 in 
Rock County for several hours. 

Source: http://www.isonline.com/news/wisconsin/fire-damages-rock-county-bar- 
forces-highwav-closure-b993237 17z 1-2698 1759 1 .html 

7. August 4, Odessa American - (Texas) Truck driver injured in Ward County train 

derailment. Three engines and 10 freight cars from a Union Pacific train derailed after 
the train collided with a semi-truck at a crossing in Ward County August 3 when the 
driver of the semi-truck failed to yield the right of way to the train. The driver was 
transported to an area hospital while eastbound rail traffic was halted through Odessa 
August 4 while crews repaired about 1,000 feet of damaged track and recovered cars. 
Source: http://www.oaoa.com/news/article e994475a-lc29-l le4-9508- 
001a4bcf6878.html 
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8. August 3, KTLA 5 Los Angeles - (California) 1 dead, 6 injured after multi- vehicle 
crash leaves car overturned on 10 Freeway. One person was killed and six others 
were injured August 3 when a ear erashed into another vehiele and flipped over on the 
10 Freeway in west Lost Angeles, prompting authorities to shut down two westbound 
lanes for about 2 hours. 

Source: http://ktla.eom/2014/08/03/l-dead-6-iniured-after-car-overtums-in-multiple- 
vehicle-crash-on-lO-freeway-in-west-l-a/ 

[ Return to top ] 

Food and Agriculture Sector 

9. August 5, WWJ 62 Detroit - (Michigan) Gas leak may have caused explosion at 
Kroger grocery store. Authorities believe an August 4 explosion and fire at a Kroger 
grocery store in Troy was likely the result of a natural gas leak in the loading dock area 
of the building. The store was evacuated and closed prior to the explosion due to 
reports of a gas odor inside the building and crews contained the fire to the loading 
dock area. 

Source: http://detroit.cbslocal.eom/2014/08/05/gas-leak-mav-have-caused-explosion-at- 
kro ger- grocery- store/ 

10. August 4, Charleston Daily Mail - (West Virginia) Wayne County sausage factory 
burns down. A Ballard’s Farm Sausage factory in Wayne County was destroyed 
August 4 after a fire began in an upstairs office and spread throughout the facility, 
prompting the evacuation of 12 employees. 

Source: http ://www .charlestondailymail. com/article/20 1 40804/DM0 1/ 1 40809772/ 1280 

1 1 . August 4, Food Poisoning Bulletin - (National) Lifecore chocolates recalled for 
undeclared milk. Wisconsin-based Ortho Molecular Products issued a recall for its 
LifeCore Chocolate and LifeCore Complete Chocolate products due to undeclared 
milk. The company halted distribution of the products indefinitely which were sent 
through August 1 to health care practitioners nationwide for distribution to their 
patients. 

Source: http://foodpoisoningbulletin.com/2014/lifecore-chocolates-recalled-for- 
undeclared-milk/ 

12. August 4, Greene County Daily World - (Indiana) Farmer trapped in grain bin 
successfully extricated during Monday afternoon rescue. Crews used a vacuum to 
remove the grain from a bin on the White Farms near Switz City and extricated a 
worker who became entrapped when he stepped through an open door while working to 
auger the grain, causing an avalanche that partially covered him August 4. 

Source: http://www.gcdailvworld.com/storv/21067Q6.html 
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Water and Wastewater Systems Sector 



See item 14 
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Healthcare and Public Health Sector 

13. August 4, Ashville Citizen-Times - (North Carolina) Fire guts Asheville medical 
office. Investigators continue to investigate but believe faulty wiring or some other 
accidental source caused a fire at the Biltmore Family Practice in Asheville August 4 
that started on the first floor and damaged the building. The medical office is closed 
until the practice is able to relocate. 

Source: http://www.citizen-times.eom/storv/news/local/2014/08/04/fire-guts-asheville- 
medical-office/13564375/ 



For another story, see item 11 
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Government Facilities Sector 

14. August 4, Portland Oregonian - (Oregon) DEQ fines Oregon City $10,200 for 
sewage spill. The Oregon Department of Environmental Quality issued a $10,200 fine 
to Oregon City August 4 for a June 14 sewage spill at the Parrish Road Sanitary Pump 
Station where 120,000 gallons of wastewater that overflowed due to an employee’s 
error. 

Source: http://www.oregonlive.com/oregon- 
citv/index.ssf/2014/08/deq fines Oregon city 10200 fo.html 

15. August 4, Portland Oregonian - (Oregon; California) Monday wildfire roundup: 5 
Mile Fire grows to 2,000 acres. Fire crews continued to fight several wildfires in 
Oregon and California that combined have burned thousands of acres, while three new 
fires which began August 3 have burned over 2,000 acres and compromised the Idaho 
Power transmission line in Wallowa County. 

Source: http://www.oregonlive.com/pacific-northwest- 
news/index.ssf/2014/08/monday wildfire fire roundup 5.html 

For another story, see item 4 



[ Return to top ] 

Emergency Services Sector 

16. August 5, San Francisco Chronicle - (California) Inmate allegedly broke out of jail, 
returns. A North County Detention Facility inmate escaped from the Sonoma County 
jail August 2 and returned to the jail August 3 surrendering to authorities. 
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Source: http://www.officer.com/news/11610771/inmate-allegedlv-broke-out-of-iail- 
returns 



17. August 4, NorthEscambia.com - (Florida) 911 outage for some Frontier customers; 
regular calling, internet out for some. Crews worked to repair a cut fiber optic cable 
after a contractor inadvertently cut the cable August 4, causing Frontier customers in 
several communities in Escambia County to lose either 9-1-1 landline service, Internet, 
or landline phone service. 

Source: http://www.northescambia.eom/2014/08/911-outage-for-some-frontier- 
customers-regular-calling-intemet-out-for-some 

18. August 4, WMAZ 13 Macon - (Georgia) Hawkinsville fire vehicle stolen from 
station. The Hawkinsville Fire Department is searching for a stolen truck used for 
fighting brush fires worth an estimated $20,000 after someone stole the vehicle from 
outside the department’s headquarters July 30. 

Source: http://www.13wmaz.com/storv/news/local/blecklev-dodge- 
pulaski/2014/08/04/hawkinsville-fire-vehicle-stolen-from-station/l 3578279/ 
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Information Technology Sector 

19. August 5, IDG News Service - (International) Oracle issues fix for Java update that 
crippled some Web apps. Oracle issued an update for Java 7, Java 7 Update 67, which 
contains a fix for an issue in the recent Java 7 Update 65 that caused some Web 
applications to be unable to launch. 

Source: 

http://www.computerworld.eom/s/article/9250163/0racle issues fix for Java update 
that crippled some Web apps 

20. August 5, The Register - (International) Multi function pOwnage just getting worse, 
researcher finds. A researcher with Rapid 7 reported that multi-function printers from 
several companies contain vulnerabilities that can allow an attacker to access 
usernames, email addresses, and passwords from corporate Active Directory accounts. 
The researcher and his team reported being able to gain access to corporate networks in 
40-50 percent of attempts. 

Source: 

http://www.theregister.co.uk/2014/08/05/printer pwnage just getting worse researche 
r finds/ 

21. August 5, Help Net Security - (International) DDoS attack volumes plummet as NTP 
servers got patched. Black Lotus released its Q2 2014 Threat Report which found that 
patching weaknesses in systems decreased distributed reflection denial of service 
(DrDoS) attacks by 86 percent in the second quarter of 2014 while multi-vector attacks 
such as TCP SYN and HTTP GET attacks increased 140 percent during the quarter, 
among other findings. 

Source: http://www.net-securitv.org/secworld. php?id=17206 
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22. August 5, Securityweek - (International) Mobile users targeted with SandroRat 

posing as security software. Researchers with McAfee identified a campaign targeting 
Android users in Europe which disguises the SandroRat malware as a Kaspersky 
mobile security app to trick users into installing it. The malware is spread via text 
messages and emails and purports to be from a bank as a means of enhancing mobile 
security. 

Source: http://www.securitvweek.com/mobile-users-targeted-sandrorat-posing-securitv- 
software 



23. August 5, Securityweek - (International) Flaw enabled access to internal Yahoo 
administration panel. A researcher with RMSEC identified and reported an issue with 
Yahoo that allowed him to guess a correct URE and then be logged into an internal 
content management system (CMS) with full administrator rights. Yahoo closed the 
issue after being informed by the researcher. 

Source: http://www.securitvweek.com/flaw-enabled-access-internal-vahoo- 
administration-panel 

24. August 5, Securityweek - (International) Apache Cordova vulnerabilities expose 
Android apps. IBM Security Systems researchers identified three vulnerabilities in the 
Apache Cordova developer APIs that could allow attackers to steal sensitive 
information from applications created using Apache Cordova. The Apache Cordova 
development team was notified by the researchers prior to public disclosure and an 
update was released August 4 that closes the flaws. 

Source: http://www.securitvweek.com/apache-cordova-vulnerabilities-expose-android- 
apps 

25. August 4, Threatpost - (International) RAT malware communicating via Yahoo 
Mail. A researcher with G-Data published an analysis of a remote access trojan (RAT) 
known as IcoScript that has mostly gone undetected since 2012 and uses Yahoo Mail to 
communicate with its controllers to avoid creating suspicious traffic. The RAT could 
also be modified to use Gmail or other webmail providers. 

Source: http://threatpost.com/rat-malware-communicating-via-vahoo-mail 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: httD://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See items 17 and 26 
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Commercial Facilities Sector 



26. August 5, Aspen Daily News - (Colorado) Power outage closes dozen of Aspen 
businesses. Construction crews severed a main electric feeder line August 4 that left 
many residents in downtown Aspen without power and closed dozens of businesses for 
nearly 1 1 hours for repairs. AT&T cell service for customers was also down due to the 
power being cut off to a cell phone tower. 

Source: http://www.aspendailvnews.com/section/home/16332Q 

27. August 5, WSAV 3 Savannah - (Georgia) Jesup fire believed to have begun with air 
conditioner. A faulty air conditioner is believed to be the cause of a fire that broke out 
August 4 at the Fair Haven strip mall in Jesup, destroying 7 businesses as well as an 
office space and a church. 

Source: http://www.wnct.com/storv/26195879/iesup-shopping-center-goes-up-in- 
fiames 

28. August 5, WCBS 2 New York City - (New York) Brooklyn building remains under 
partial evacuation order after crack found on facade. About a dozen families were 
displaced from an apartment building in the Brooklyn area of New York City after the 
building was evacuated August 4 due to a large crack in the facade of the structure. The 
city’s Department of Buildings issued several violations to the contractor saying an 
adjacent construction site caused the damage during the excavation process. 

Source: http://newvork.cbslocal.com/2014/08/05/brooklyn-building-remains-under- 
partial-evacuation-order-after-crack- found-on-facade/ 

29. August 4, KKTV 11 Colorado Springs - (Colorado) Walmart evacuated after bomb 
threat. A Walmart store in Colorado Springs was evacuated for several hours August 3 
due to an alleged bomb threat that was phoned into the store. The building was cleared 
to reopen after authorities found nothing suspicious at the scene. 

Source: http://www.kktv.com/home/headlines/WalMart-Evacuated-after-Bomb-Threat- 
26980495 Thtml 

30. August 4, KXTV 10 Sacramento - (California) Van driver crashes into 3 people at 
Stockton Flea Market. The California Highway Patrol is investigating after the driver 
of a van lost control of the vehicle due to a mechanical failure and struck three people, 
two vehicles, and several stands inside the Wilson Way Flea Market in Stockton 
August 3. 

Source: http://www.newsl0.net/storv/news/local/stockton/2014/08/04/van-driver- 
crashes-into-3-people-at-stockton-flea-market/13562757/ 

3 1 . August 4, Faribault Daily News - (Minnesota) E. Coli reportedly traced back to Rice 
County Fair. At least nine people were sickened with E. coli infections, including four 
individuals that were hospitalized, after attending the Rice County Fair in Minnesota 
between July 15 and July 20. Authorities investigating the incident believe the E. coli 
originated from an animal in the fair’s bam or petting zoo and the outbreak is not food- 
related. 

Source: http://www.southemminn.com/faribault daily news/article 92bbd630-885e- 
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5a59-af83-5al59cl223a6.html 



For additional stories, see items 6 and 9 
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Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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